Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/uhvl5QJmThkWxFG7sYrSj9vfHuY.roa
File: uhvl5QJmThkWxFG7sYrSj9vfHuY.roa (raw, json)
Hash identifier: ew5+wg8NXVeNQgQrxepd23bbNip2EgzxtAKYCfnUR5M=
Subject key identifier: BA:1B:E5:E5:02:66:4E:19:16:C4:51:BB:B1:8A:D2:8F:DB:DF:1E:E6
Certificate issuer: /CN=a7e480768c60361b8554b4be826f5e75839d726e
Certificate serial: 01A08FAB769FA1AF18872E02BAA0513ABC07
Authority key identifier: A7:E4:80:76:8C:60:36:1B:85:54:B4:BE:82:6F:5E:75:83:9D:72:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-SAdoxgNhuFVLS-gm9edYOdcm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/uhvl5QJmThkWxFG7sYrSj9vfHuY.roa
Signing time: Fri 11 Sep 2026 08:52:53 +0000
ROA not before: Fri 11 Sep 2026 08:52:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197352
IP address blocks: 194.9.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/p-SAdoxgNhuFVLS-gm9edYOdcm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/p-SAdoxgNhuFVLS-gm9edYOdcm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-SAdoxgNhuFVLS-gm9edYOdcm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:ab:76:9f:a1:af:18:87:2e:02:ba:a0:51:3a:bc:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e480768c60361b8554b4be826f5e75839d726e
Validity
Not Before: Sep 11 08:52:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ba1be5e502664e1916c451bbb18ad28fdbdf1ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0b:f6:a7:fd:0a:c6:bd:1f:96:e5:0f:61:80:
5c:00:30:42:48:57:f3:9b:67:e7:5b:9f:94:b2:8f:
b0:90:5a:80:25:a8:70:1d:55:9a:80:d8:9f:ba:6b:
b7:2c:cd:26:2e:0c:9c:30:75:09:8a:16:83:54:1e:
1c:8b:c1:72:4c:58:6a:31:65:b6:06:0a:cb:03:62:
b8:a8:16:62:62:e4:6e:54:d3:6e:ad:18:19:6f:fc:
4e:8f:5c:95:78:35:d1:15:5d:47:65:89:86:d2:88:
de:5b:f5:a1:2e:e3:99:6a:27:65:87:3b:87:a7:d3:
1b:4c:8b:30:c9:cf:6b:05:fa:4d:8d:cd:84:ba:c6:
b0:9f:2f:7c:c3:82:d4:a7:21:1f:8a:99:dc:54:5e:
ba:59:a7:d3:15:cc:0a:52:3d:0b:88:fc:ff:c3:1a:
76:c3:32:64:7f:79:04:e4:7e:8d:0d:4a:92:aa:91:
38:e5:f4:f9:f1:e3:51:2a:b3:cc:33:23:d3:3b:0d:
58:34:68:29:46:a5:01:e8:2a:a5:78:a3:14:41:6d:
dd:36:6f:e6:b3:0e:00:6c:3d:8b:20:4b:6b:82:3c:
f4:ae:a8:7f:c2:2c:1a:02:ef:5b:23:01:a4:5e:b4:
b7:6e:4f:fa:9e:43:69:f1:13:9b:d4:22:5f:38:63:
b7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1B:E5:E5:02:66:4E:19:16:C4:51:BB:B1:8A:D2:8F:DB:DF:1E:E6
X509v3 Authority Key Identifier:
keyid:A7:E4:80:76:8C:60:36:1B:85:54:B4:BE:82:6F:5E:75:83:9D:72:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-SAdoxgNhuFVLS-gm9edYOdcm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/uhvl5QJmThkWxFG7sYrSj9vfHuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/596ba7-4ae8-419e-8b62-a61cd8c21ead/1/p-SAdoxgNhuFVLS-gm9edYOdcm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.55.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:cf:49:50:ab:a9:57:d9:79:05:e6:19:0c:f4:54:87:9c:98:
ce:86:67:5f:e3:0c:fd:d7:62:91:df:f5:86:4e:ff:b8:26:97:
fd:ca:e1:1f:f7:22:da:bc:95:4d:88:73:cc:96:4d:d2:ed:9b:
15:f6:6c:e0:5c:84:19:4c:1f:6b:e8:61:ee:84:0d:79:20:08:
16:11:8a:4f:25:f0:ff:a5:4d:05:5b:58:78:ec:1e:6f:e0:ba:
a5:60:be:60:28:47:ef:63:dd:b1:64:8c:28:50:af:f1:b6:07:
0f:9e:c6:d4:2c:7a:5b:a4:05:54:40:8b:15:65:19:19:a1:1f:
db:d0:f8:4a:e8:8d:e7:eb:fa:b2:97:2d:2d:00:d2:0f:09:bc:
2d:d1:33:2e:b2:8a:71:75:5a:65:4c:22:a4:8c:6c:a4:6a:83:
09:07:ee:e3:ef:74:3b:c9:e8:92:ce:e7:2b:d0:bc:b8:b1:cd:
28:95:a8:2b:c5:ad:c0:c1:c6:b3:e1:30:87:8c:dc:25:44:81:
c8:45:4e:46:f6:48:46:c7:2f:e7:ee:51:e1:f0:8e:14:9e:f7:
95:96:c7:f2:dc:02:56:f7:99:c0:15:42:c0:a1:1e:89:e8:ea:
cb:bb:fc:f8:77:67:c0:8c:90:f4:f3:87:88:26:e4:06:49:d6:
1a:85:aa:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:25:30 2026 by rpki-client